direct: Add permissions support for dashboards

[shreyas-goenka]

Tested using new acceptance tests.

[eng-dev-ecosystem-bot]

Run: 19116387055

	Env	❌​FAIL	🟨​KNOWN	🔄​flaky	💚​RECOVERED	🙈​SKIP	✅​pass	🙈​skip
❌​	aws linux	2	1	9		1	348	594
❌​	aws windows	2	1	7		1	351	593
🔄​	aws-ucws linux			8	1	1	474	489
🔄​	aws-ucws windows			12	1	1	471	488
❌​	azure linux	2	1	8		1	349	593
❌​	azure windows	2	1	2		1	356	592
🔄​	azure-ucws linux			4	1	1	474	488
🔄​	azure-ucws windows			6	1	1	473	487
💚​	gcp linux				1	1	358	595
💚​	gcp windows				1	1	359	594

57 failing tests:

Test Name	aws linux	aws windows	aws-ucws linux	aws-ucws windows	azure linux	azure windows	azure-ucws linux	azure-ucws windows	gcp linux	gcp windows
TestAccept	🟨​K	🟨​K	💚​R	💚​R	🟨​K	🟨​K	💚​R	💚​R	💚​R	💚​R
TestAccept/bundle/deploy/mlops-stacks	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/deployment/bind/cluster	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/deployment/bind/model-serving-endpoint	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/deployment/bind/secret-scope	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s
TestAccept/bundle/deployment/unbind/grants	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s
TestAccept/bundle/generate/auto-bind	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/local_state_staleness/DATABRICKS_BUNDLE_ENGINE=direct	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p
TestAccept/bundle/local_state_staleness/DATABRICKS_BUNDLE_ENGINE=terraform	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p
TestAccept/bundle/resources/clusters/deploy/data_security_mode	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p
TestAccept/bundle/resources/clusters/deploy/data_security_mode/DATABRICKS_BUNDLE_ENGINE=direct	✅​p	✅​p	✅​p	✅​p	✅​p	🔄​f	🔄​f	✅​p	✅​p	✅​p
TestAccept/bundle/resources/clusters/deploy/data_security_mode/DATABRICKS_BUNDLE_ENGINE=terraform	✅​p	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/dashboards/generate_inplace	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/dashboards/generate_inplace/DATABRICKS_BUNDLE_ENGINE=direct	✅​p	🔄​f	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/dashboards/generate_inplace/DATABRICKS_BUNDLE_ENGINE=terraform	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/experiments/basic	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/experiments/basic/DATABRICKS_BUNDLE_ENGINE=direct	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/jobs/check-metadata	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/jobs/check-metadata/DATABRICKS_BUNDLE_ENGINE=terraform	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/jobs/shared-root-path	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/jobs/shared-root-path/DATABRICKS_BUNDLE_ENGINE=direct	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/models/basic	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/models/basic/DATABRICKS_BUNDLE_ENGINE=direct	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/permissions/dashboards/create	❌​F	❌​F	✅​p	✅​p	❌​F	❌​F	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/permissions/dashboards/create/DATABRICKS_BUNDLE_ENGINE=terraform	❌​F	❌​F	✅​p	✅​p	❌​F	❌​F	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/resources/registered_models/basic	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s
TestAccept/bundle/resources/registered_models/basic/DATABRICKS_BUNDLE_ENGINE=terraform			✅​p	🔄​f			✅​p	✅​p
TestAccept/bundle/run/app-with-job	🙈​S	🙈​S	🙈​S	🙈​S	🙈​S	🙈​S	🙈​S	🙈​S	🙈​S	🙈​S
TestAccept/bundle/templates/default-python/combinations/classic/DATABRICKS_BUNDLE_ENGINE=terraform/DLT=no/NBOOK=yes/PY=no	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p
TestAccept/bundle/templates/default-python/combinations/classic/DATABRICKS_BUNDLE_ENGINE=terraform/DLT=yes/NBOOK=no/PY=no	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p
TestAccept/bundle/templates/default-python/combinations/serverless	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/templates/default-python/combinations/serverless/DATABRICKS_BUNDLE_ENGINE=direct/DLT=yes/NBOOK=yes/PY=yes	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s
TestAccept/bundle/templates/default-python/combinations/serverless/DATABRICKS_BUNDLE_ENGINE=terraform/DLT=no/NBOOK=no/PY=no	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s
TestAccept/bundle/templates/default-python/combinations/serverless/DATABRICKS_BUNDLE_ENGINE=terraform/DLT=no/NBOOK=no/PY=yes	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s
TestAccept/bundle/templates/default-python/combinations/serverless/DATABRICKS_BUNDLE_ENGINE=terraform/DLT=yes/NBOOK=yes/PY=yes	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s
TestAccept/bundle/templates/default-python/integration_classic/DATABRICKS_BUNDLE_ENGINE=direct/UV_PYTHON=3.11	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/templates/default-python/integration_classic/DATABRICKS_BUNDLE_ENGINE=direct/UV_PYTHON=3.12	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/templates/default-python/integration_classic/DATABRICKS_BUNDLE_ENGINE=direct/UV_PYTHON=3.13	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestAccept/bundle/templates/default-python/integration_classic/DATABRICKS_BUNDLE_ENGINE=terraform/UV_PYTHON=3.10	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestSparkJarTaskDeployAndRunOnVolumes/Databricks_Runtime_13.3_LTS	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s
TestSparkJarTaskDeployAndRunOnVolumes/Databricks_Runtime_14.3_LTS	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s
TestClustersList	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestFsCatDoesNotSupportOutputModeJson	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestFsCpDirToDirFileNotOverwritten	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestFsCpDirToDirFileNotOverwritten/dbfs_to_dbfs	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestFsCpDirToDirFileNotOverwritten/dbfs_to_uc-volumes	🙈​s	🙈​s	🔄​f	✅​p	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s
TestFsCpDirToDirFileNotOverwritten/local_to_dbfs	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestFsCpDirToDirFileNotOverwritten/uc-volumes_to_uc-volumes	🙈​s	🙈​s	🔄​f	✅​p	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s
TestFsCpDirToDirWithOverwriteFlag	✅​p	🔄​f	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestFsCpDirToDirWithOverwriteFlag/dbfs_to_dbfs	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestFsCpDirToDirWithOverwriteFlag/uc-volumes_to_dbfs	🙈​s	🙈​s	🔄​f	✅​p	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s
TestFsCpFileToFileFileNotOverwritten/dbfs_to_dbfs	✅​p	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestFsCpFileToFileFileNotOverwritten/dbfs_to_uc-volumes	🙈​s	🙈​s	✅​p	🔄​f	🙈​s	🙈​s	✅​p	✅​p	🙈​s	🙈​s
TestFsCpSourceIsDirectoryButTargetIsFile	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestSecretsPutSecretBytesValue	🔄​f	✅​p	🙈​s	🙈​s	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestSecretsPutSecretStringValue	🔄​f	✅​p	🙈​s	🙈​s	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p
TestSyncIncrementalFileOverwritesFolder	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p	✅​p

[denik]

Why not run this test locally?

[shreyas-goenka]

The cloud identity is a service principal, but the local identity is a username. That shows up in the permissions request body.

It was easiest to just run the test on the cloud. Otherwise we'll need separate golden files for local and cloud.

[denik]

We have IsServicePrincipal = true setting in test.toml for such cases. This makes test runner set up service-principal-like identity locally.